Cloud Bridge Agent Introduction

This chapter introduces the basic information about the IDaaS Cloud Bridge.

Understanding Cloud Bridge

Usually, for security reasons, enterprises are unwilling to expose internal services directly to the public internet. However, enterprise customers' operations in IDaaS need to access internal services. To solve this problem, we propose the Cloud Bridge solution. Through Cloud Bridge, customers' local services are connected with cloud-based IDaaS to achieve bidirectional communication between local services and cloud IDaaS.

Cloud Bridge Agent acts as a "bridge", establishing a network security tunnel between enterprise internal services and IDaaS cloud services, preventing internal services from being directly exposed to the public internet. This effectively protects network entities from eavesdropping, replay attacks, and other hazards.

To provide a more secure environment for enterprise services and IDaaS cloud services, Cloud Bridge Agent supports configuring an egress IP for the Cloud Bridge Agent. After configuration, when the Cloud Bridge Agent establishes a connection with IDaaS cloud services, the Cloud Bridge Agent will be verified. If the IP is not the configured IP, the connection will be rejected. By configuring the Cloud Bridge Agent's IP, only specific IPs are allowed to connect to IDaaS cloud services, ensuring service security.

Currently, IDaaS provides three types of Cloud Bridge Agents: Authentication Source Cloud Bridge, Identity Source Cloud Bridge, and Application Sync Cloud Bridge.

TIP

• Cloud Bridge Agent is used to establish a connection channel between BambooCloud IDaaS and enterprise internal corresponding services.
• Bidirectional communication: Agent service and BambooCloud IDaaS perform bidirectional communication.
• Security first: Only Agents registered in BambooCloud IDaaS can be used normally after local authentication. During data transmission, TLS is used throughout.
• Local configuration storage: Connection configuration information is stored locally. For example, AD connection configuration is stored in the enterprise locally, not in BambooCloud IDaaS.
• High reliability: Heartbeat and watchdog ensure high system reliability.

Cloud Bridge Interaction Model